Release Notes for Build 57.24 of NetScaler MAS 12.0 Release

July 13, 2018|Release notes version: 1.0

This release notes document describes the enhancements and changes, lists the issues that are fixed, and specifies the issues that exist, for the NetScaler MAS release 12.0 Build 57.24. See Release history.

Notes

This release notes document does not include security related fixes. For a list of security related fixes and advisories, see the Citrix security bulletin.

This build includes fixes for the following 1 issues that existed in the previous NetScaler MAS 12.0 release build: 689695.

The known issues section is cumulative. It includes issues newly found in this release, and issues that were not fixed in previous NetScaler MAS 12.0 releases.

The [# XXXXXX] labels under the issue descriptions are internal tracking IDs used by the NetScaler team.

In virtual server health bar graph, NetScaler MAS classifies applications based on the percentage of the virtual server health. The bar graph displays the number of applications that are grouped to have the health value between 0% to 100%.

Virtual server health represents the health of virtual servers grouped under discrete applications. But if there are custom applications that comprise two or more virtual servers, the least virtual server health is considered among the group.

You can now apply a filter and see only those applications in the application dashboard that match the selection criteria.

[# 694425]

Application dashboard improvements

In NetScaler MAS GUI, the following changes have been made to improve the usability of the application dashboard:

1. The 0 app score represents the number of virtual application servers that are down or out of service. This 0 app score is now part of the existing app score legend in application dashboard view.

2. The app summary panel now displays the text "Showing N/N Apps" instead of the earlier "Total Apps N/N." Consider an example where you choose 60 in the app score graph. There are 16 applications out of the total 26 applications that have an app score between 40 and 60. The app summary panel displays "Showing 16/26 Apps." If no criteria are selected, the app summary panel displays "Showing 26/26 Apps."

3. The app summary panel now displays a new chart to filter applications based on the applicable categories. A new application category chart is added to the app summary panel. This chart displays a histogram for all categories defined in NetScaler MAS. All discrete applications now appear under "Others" category, and custom applications appear under their respective category names. These category names are assigned while defining custom applications.

When you apply ABR video optimization to a connection, the download speed is reduced considerably. The TCP Insight Upload and Download Speed Reports also report a lower download speed of a network. The report now excludes the optimized video calculations. Thus the accuracy of the report improves when ABR optimization is enabled.

[# 709640]

Networks

View network reports for multiple NetScaler instances

NetScaler MAS allows you to choose multiple NetScaler instances and up to five virtual servers while generating a network report. You can now monitor network reporting data for all these instances simultaneously.

You can also export and schedule the report from the Network Reporting feature on the NetScaler MAS.

[# 665989]

Describing groups

In NetScaler MAS, when you create user groups, you can now type a description of your group in the Group Description box. A good summary helps you to understand the role and function of the group in a better way at a later point.

[# 685186]

View throughput details for licensed virtual servers

You can manage and allocate licenses to your virtual servers based on the throughput details. Throughput is the sum of the Request Bytes and Response Bytes. The System Licenses page displays throughput as a column. You can sort through the throughput column to see which virtual server has less or more throughput usage and allocate licenses accordingly.

To view throughput details:

1. Navigate to Networks > Licenses > System Licenses.

2. On the System Licenses page, under Managed Virtual Servers, ensure that the option to Auto-select Virtual Servers is turned OFF. You can now explicitly select the virtual servers that you’d like to manage.

3. To choose virtual servers, select Click to select.

4. On the Choose Virtual Servers page, you can now see the throughput details as a column under each virtual server tab.

[# 687056]

Excluding default NetScaler certificates in SSL dashboard

NetScaler MAS allows you to show or hide default NetScaler certificates showing up on the SSL dashboard charts based on your preferences. To show or hide default certificates on the SSL dashboard:

You can now import a certificate from a NetScaler instance and apply it to other targeted NetScaler instances from the NetScaler MAS. You need not download the certificate to your local system and then apply the downloaded certificate to the selected instances.

Access policy management for RBAC in NetScaler MAS now lets you configure permissions for network functions sub nodes also. Access policy settings are configured for all sub nodes such as virtual servers, services, service groups, and servers. Now, you can provide a granular level access permission for sub nodes under Load Balancing node and GSLB node.

[# 692034]

SNMP trap notification for SSL certificate expiry

NetScaler MAS now sends SSL certificate expiry trap to external trap destination server when the SSL certificates are due for expiry. NetScaler MAS sends the trap when the following two conditions are satisfied:

• You have configured the number of days for the certificate expire in SSL dashboard settings page

• You have added the trap destination

You can set trap destinations by navigating to System > SNMP > Trap Destinations. Type the IP address of the destination SNMP server where the traps are sent. Enter the port number and type "public" (without quotes) as the community string.

To learn how to set up notifications for SSL certificate expiry from NetScaler MAS, see https://docs.citrix.com/en-us/netscaler-mas/12/certificate-management/how-to-set-up-notificationsfor-ssl-certificate-expiry.html.

[# 694651]

Upgrade NetScaler instance in high availability mode

The process of upgrading your NetScaler instances in high availability mode from NetScaler MAS has been improved. You can create a maintenance task to upgrade the HA pair in two stages. You can schedule or perform the upgrade on the initial node and schedule the upgrade for the second node at a later date or time.

- Currently, the second node of the HA pair is upgraded first, and the upgrade for the first node is scheduled later.

- Synchronization and propagation of the nodes are disabled until both the nodes are upgraded successfully.

- After the upgrade of both nodes, you will see an error message in execution history (that indicates that HA Sync is not enabled) if your nodes in the HA pair are on different builds or versions.

[# 694907, 704512]

Ability to export and schedule reports for selected network functions

You can generate a comprehensive report for selected network functions. This report allows you to have a high-level view of mapping between the NetScaler instances, partitions, and the corresponding bound entities. The bound entities are virtual servers, service groups, and services that are present in the network. The various network functions are as follows:

• Load Balancing

• Content Switching

• Cache Redirection

• Global Server Load Balancing (GSLB)

• Authentication

• NetScaler Gateway in NetScaler MAS.

You can export these reports in .csv file format. The report displays the following virtual server data:

• NetScaler IP address

• Host name

• Partition data

• Type of virtual server

• Server name

• Target LB Virtual Server

• Service name

• Service Group name

[# 696259]

View Bound Entities for Servers

You can now view the bound entities on your managed NetScaler instances for specific server. You can now see the following:

1. You can now view the bound services and bound service groups for a selected Load Balancing server.

Navigate to Networks > Network Functions > Load Balancing > Servers. Select a server, and click Show Bound Services or Show Bound Service Groups. On the Bound Services page, you can either enable or disable the service and poll the entity. Similarly, on the Bound Service Groups page, you can enable or disable the service group, view the bound service group members and poll the entity.

2. You can view the bound LB virtual servers for a server on a Content Switching virtual server.

Navigate to Networks > Network Functions > Content Switching. Select a server, and click Show Bound LB Virtual Servers. On the Bound LB Servers page, you can either enable or disable the virtual server and poll it.

Note: When you select a Content Switching virtual server, and click Show Bound LB Virtual Server. The NetScaler MA Service lists the default LB server and the policy-based target LB virtual server.

3. You can view the bound target LB virtual servers for a server on a Cache Redirection virtual server.

Navigate to Networks > Network Functions > Cache Redirection. A new Target LB Virtual Server column is displayed on the Cache Redirection Virtual Servers page that lists the name of the target LB virtual server.

2. In the Group Name box, type the name of the group and select the required role.

3. In Applications and Templates tab, clear the StyleBooks check box and select the required StyleBooks that your user can access.

4. In Select Users tab, select the users to be added to the group

5. Click Finish.

[# 664844]

Python SDK support for StyleBooks

In NetScaler MAS, Python SDK now supports Nitro calls for StyleBooks.

[# 672420]

Enabling single sign-on for Office 365 applications in NetScaler instances using StyleBook

The default SSO Office 365 StyleBook in NetScaler MAS allows you to enable single sign-on for Office 365 applications in NetScaler instances. The StyleBook configures the NetScaler instance as a SAML identity provider for authenticating users to access Office 365 Apps.

[# 679552]

Adding SSL support to SharePoint StyleBook

NetScaler MAS now supports SSL Mode of SharePoint application by configuring SSL based LB virtual servers. Make sure you select SSL as the front-end protocol. Note that the virtual port is set to 443 by default.

[# 694450]

Importing StyleBooks using files or ZIP bundles

NetScaler MAS allows you to import multiple StyleBooks in YAML format. You can compress more than one YAML StyleBook file in a zip (.zip) format or tarball (.tgz, .gz) format.

[# 694938, 658468]

Built-in YAML viewer/editor to view/create StyleBook definitions

NetScaler MAS provides you a built-in YAML editor that allows you to compose your StyleBook that corresponds to YAML guidelines. The content is validated against YAML standards and any deviation is highlighted. You can then correct the content and import the StyleBook into NetScaler MAS. The built-in YAML editor provides two advantages while writing your own StyleBook:

- Color coded. The color coding of the content helps you to differentiate easily between the keys and the values defined in the YAML content.

- YAML validation. The content is validated for any YAML errors as you type in and any deviation is immediately highlighted.

[# 695951, 699609]

Downloading custom StyleBooks and dependent custom StyleBooks

You can now download a custom StyleBook and its dependent StyleBooks in YAML format to your system as a ZIP or TGZ file. In NetScaler MAS, navigate to Applications > Configurations > StyleBooks, and from the list of StyleBooks that is displayed on the right-side panel, click the Download link for the StyleBook that you want to download.

Note: You cannot download default StyleBooks.

[# 696383]

Deleting custom StyleBooks and dependent custom StyleBooks

You can remove a custom StyleBook and its dependent StyleBooks from NetScaler MAS folder system. Navigate to Applications > Configurations > StyleBooks, and from the list of StyleBooks that is displayed on the right-side panel, and click "X" icon on the right of the StyleBook you want to delete. You are given the option of deleting just the file or all the dependent StyleBooks too.

Note: You cannot delete default StyleBooks.

[# 696384]

Ability to collect traffic statistics from various NetScaler MAS Insights using StyleBooks

You can now configure NetScaler MAS through StyleBooks to collect traffic statistics from various NetScaler MAS Insights that are listed as follows:

• Web Insight

• Security Insight

• HDX Insight

• NetScaler Gateway Insight.

The virtual servers supported are load balancing, content switching, and VPN virtual servers. A few of the critical information that are collected are listed as follows:

• user and server response time

• real-time client and network latency metrics

• historical reports

• end-to-end performance data

• end-point analysis (EPA)

• authentication

• single sign-on (SSO)

• application launch failures

You can also view the details of active and terminated sessions for a user.

[# 697195]

Fixed Issues

The issues that are addressed in Build 57.24.

Analytics

In Security Insight, Safety Index filters display incorrect output.

[# 640160]

Increased NITRO calls are causing NetScaler MAS to stop responding.

[# 696032, 692022]

After NetScaler MAS HA failover, the AppFlow configurations on the NetScaler instances are not updated with the latest active and passive NetScaler MAS IP addresses.

[# 699984, 693072, 703364, 703526]

In Web Insight reports, the combined graphs that overlap the selected two graphs display a blank page.

[# 701641]

Unable to access NetScaler MAS due to the increase in the number of file descriptors allocated per PGSQL process.

[# 706782, 706770, 707155, 707950, 707957, 708045]

The data aggregated per minute for Gateway Insight was not purged which affected the performance of NetScaler MAS.

[# 707219]

High Availability

If you disable a high availability pair using the NetScaler MAS GUI, the primary database gets corrupted. After the primary node is rebooted, the subsystems in NetScaler MAS such as Inventory, StyleBooks, Data Collector and so on, are not restarted after reboot.

[# 695723, 681645, 706197, 705524, 710347]

NetScaler instance backup is triggered for both primary and secondary NetScaler instances when the instances are deployed in high availability.

[# 698903]

The GUI might not load for some non-nsroot users, when a load balancing virtual server is configured in front of NetScaler MAS servers in HA mode. With this fix, the GUI loads for non-nsroot users too.

NetScaler Insight Center

If AppFlow is enabled globally or in any VPN virtual server, NetScaler Gateway might fail, if a user logs in to VPN and launches an application.

[# 698664, 698699, 705159, 705023, 697366]

NetScaler SDX Appliance

An attempt to log on to the NetScaler SDX appliance running software release 12.0 by using the GUI or CLI might fail under one of the following conditions

- Single Bundle upgrade is attempted.

- The appliance is restarted.

- The SDX Management Service is restarted through XenServer.

In all the above situations, the SDX Management Service database gets corrupted, which causes the logon failure.

[# 687201]

Networks

When a configuration template is edited, it is not displayed on NetScaler MAS.

[# 687887]

In NetScaler MAS, when you edit and save a configuration template, the template does not retain the type of the defined variable.

[# 689695]

NetScaler upgrade in a high availability setup fails due to timeouts.

[# 690860]

The following message is continuously displayed on the hypervisor console:

"monit [163]: 'triton' process is not running on MAS Console". This does not signify any major issue. However this can make it difficult to interact with the MAS VM through hypervisor console. This issue is not seen through SSH session.

To create a configuration job using user-defined templates from templates list, you must drag the templates to the editor and edit the variables by providing new values. But when the config job is executed, the variables are not replaced by the new values provided by you.

[# 698812, 689695]

Duplicate service or service group entries are displayed for each partition’s service or service group after a NetScaler failover. This issue does not occur with services or service groups that belong to the default partition.

[# 699224, 699018]

Only the first chart of the two Network Report charts displayed in the same screen were exported in PDF, PNG, or JPEG formats.

[# 699380]

When device API proxy requests are sent to NetScaler MAS, it returns the Content-Length and Transfer-Encoding in the response header which is contrary to RFC 2616.

[# 700717, 700623]

In the NetScaler MAS GUI, when you filter the syslog messages using the Newest First filter, the list is not filtered accordingly. Instead, if you change the filer to Oldest First and then to Newest First, the list is displayed appropriately

[# 702305, 702180]

Incorrect values for DH (Diffie-Hellman) and Ephemeral RSA keys are displayed if an SSL profile carrying different properties is attached to an SSL virtual server. Values are correctly displayed only for SSL virtual server IPs that do not have an SSL profile.

[# 702680]

NetScaler MAS does not display the number of backup files in the System Backup Settings page.

[# 703421]

Instance backups are not stored on NetScaler MAS, if a remote backup location is configured.

[# 703910]

In NetScaler MAS HA deployment, consider a case if you applied licenses to both the nodes instead of just the primary node and upgraded to 12.0, 56.20 build. The license capacity might intermittently increase or decrease depending on the inclusion or exclusion of the license added in the secondary NetScaler MAS. You will see an alert on the NetScaler MAS GUI indicating the reduction of the virtual server licenses.

[# 704677]

High CPU usage is noticed when network reporting threshold is configured and no device is selected. This affects NITRO requests being sent to network reporting and the network function dashboards, and slows down the response from them.

[# 707918]

Orchestration

OpenStack supports 255 chars as maximum length of name and description for LB entities. But NetScaler MAS orchestration APIs restrict the maximum length to 40 chars. Because of this, OpenStack neutron lbaas commands to create or update LB entities with name or description length greater than 40 chars fails. With this fix, NetScaler MAS orchestration APIs are modified to support 255 chars as maximum length of name and description of LB entities.

[# 695351]

Known Issues

The issues that exist in Build 57.24.

Analytics

When a NetScaler instance is upgraded from 11.0 or lower versions to 11.1 version, and when AppFlow is enabled on any of the virtual servers configured on that instance, NetScaler MAS does not add Logstream configuration. This ensures that any NetScaler instance upgraded from 11.0 to 11.1 sends logs in IPFIX format.

[# 683542]

When using Security Insight in NetScaler MAS, if the selected duration is more than one hour, the attack time is displayed as "NA."

[# 686874]

In the Gateway insight report, inconsistent error count values are displayed in the tabular format and in the charts.

[# 703362]

Licensing

When a virtual server is renamed, NetScaler MAS assumed that the renamed virtual server is either deleted or that a new virtual server has been created. License selection and other authorisation information are not applied on the renamed virtual server.

Workaround: Reapply the license on the renamed virtual server if auto-selection of licenses is disabled in NetScaler MAS. Add the renamed virtual server to user groups again.

[# 696084]

Networks

When you click Repackage Backup and enter a wrong password for a NetScaler SDX backup file on NetScaler MAS, no error message is displayed.

[# 670546]

In a two-stage NetScaler HA upgrade procedure, the primary nodes should not be upgraded if secondary nodes fail to upgrade. But the primary nodes progressed to upgrading even if the secondary nodes did not successfully upgrade to the next version.

[# 705117]

Orchestration

For NetScaler MAS integration with OpenStack Heat, allotment of the NetScaler instances is based on tenants, not on placement policies. You must create a service package for OpenStack Heat by assigning tenants.

[# 666906]

In Cisco Application Centric Infrastructure (ACI) hybrid mode, you cannot reuse or reassign the same server IP address, which is already present in the NetScaler appliance.

Workaround: While assigning the server IP, ensure the IP address used in APIC graph is not present in the NetScaler appliance.

[# 701670]

What's New in Previous NetScaler MAS 12.0 Releases

The enhancements and changes that were available in NetScaler MAS 12.0 releases prior to Build 57.24. The build number provided below the issue description indicates the build in which this enhancement or change was provided.

Analytics

Support for NetScaler Secure Web Gateway Analytics

You can now integrate NetScaler Secure Web Gateway (SWG) log data into the NetScaler Management and Analytic System (MAS). The NetScaler SWG appliance exports its logged user activity and the subsequent records to NetScaler MAS by using logstream. NetScaler MAS then collates and presents information about the activities of users (for example, websites visited and time spent on line). It also reports bandwidth use and detected threats, such as malware and phishing sites. You can use these key metrics to monitor your network and take corrective actions with the NetScaler SWG appliance.

[From Build 51.24]

[# 606272]

Creating Thresholds and Configuring Rules and Alerts for HDX Insight

The threshold management for HDX Insight in NetScaler MAS allows you to proactively configure alerts whenever the thresholds set are breached. This threshold management is extended to configure a group of threshold rules and monitor the group instead of individual rules. A threshold rule group comprises one or more user defined threshold rules for metrics chosen from entities such as users, application, and desktops against an expected value.

The threshold management for HDX Insight in NetScaler MAS allows you to proactively configure alerts whenever the thresholds set are breached. This threshold management is extended to configure a group of threshold rules and monitor the group instead of individual rules. A threshold rule group comprises one or more user defined threshold rules for metrics chosen from entities such as users, application, and desktops against an expected value. Threshold groups can also be bound to geolocations for geo specific monitoring for user entity.

[From Build 56.20]

[# 652447]

AppFlow Transportation Modes

Note: This feature is currently available in Beta.

You can now set the AppFlow transportation mode to IPFIX or Logstream. To specify the transportation mode for the discovered NetScaler instances:

1. From the action drop-down, select Enable/Disable Insight.

2. Select the virtual servers for which to enable AppFlow.

3. Click Enable AppFlow.

4. In the Enable Insight window, set the transport mode to IPFIX or Logstream.

You can now assess the peak usage trend of an application. You can also compare its impact on the application performance based on App Score from the Application Dashboard in NetScaler MAS. You can use the peak usage trend and performance impact on the application information and make necessary changes in your deployment. This helps to improve the performance of the application.

To view the peak usage trend of an application, navigate to Applications > App Dashboard. Select the application and click Peak Usage.

For more information, see https://docs.citrix.com/en-us/netscaler-mas/12/application-analytics-and-management.html

[From Build 56.20]

[# 688208]

AppFlow Transportation Modes

You can now set the AppFlow transportation mode to IPFIX or Logstream. To specify the transportation mode for the discovered NetScaler instances:

1. From the action drop-down, select Enable/Disable Insight.

2. Select the virtual servers for which to enable AppFlow.

3. Click Enable AppFlow.

4. In the Enable Insight window, set the transport mode to IPFIX or Logstream.

For more information, see https://docs.citrix.com/en-us/netscaler-mas/12/analytics/logstream.html

[From Build 56.20]

[# 694412]

Application Analytics and Management

Application Health Dashboard

Note: This feature is currently available in Beta.

The health score is the product of a scoring system that defines how well an application is performing. It shows whether the application is performing well in terms of responsiveness, is not vulnerable to threats, and has all systems up and running. Health Score is displayed at the application level. Calculation of the score is based on the following three key components, which defines Health Score:

- APP Performance (APDEX score of the application)

Derived from the response time variation of the application.

- App Server Resource

This value is derived from three more components:

> Average CPU Usage

> Memory Usage

> NIC Card Saturation

- NetScaler System Resource

This value is derived from two more components:

> Percentage of Active Services

> Surge Queue Requests

For more information, see http://docs.citrix.com/en-us/netscaler-mas/12/application-analytics-and-management/application-security-analytics.html.

[From Build 51.24]

[# 674073]

Exporting Reports of App Dashboard and Security Dashboard

NetScaler MAS allows you to export the App Dashboard and Security Dashboard pages as reports.

1. On the Application Dashboard page, click the export icon at the top right side of the page.

2. Choose the export option as either .pdf or .png file.

3. Click OK.

The report downloads on to your system. Currently, you can download reports of only one application at a time.

[From Build 56.20]

[# 693753]

Configuring App Score in NetScaler MAS

NetScaler MAS allows you to configure App Scores. Calculation of the App Score is based on the average values of the following components:

• surge queue threshold

• total CPU usage threshold

• total memory usage threshold

• the threshold value of NIC packet discards

• server response time

You can configure the threshold values for all these components to be monitored in the NetScaler instances. NetScaler MAS calculates the App Score based on the threshold values and the values of the breach. The App Scores are displayed for all the applications that are discovered as well as the custom applications you define on the application dashboard.

The App Activity Investigator in the Dashboard tab displays key information of a selected application such as App Score components, errors, events, and anomalies. Each of the legends is aggregated at one-minute interval if the selected duration is one hour, and at a one-hour interval, if the selected duration is one day. These deviations are displayed as rectangular legends on the graph. These legends are aggregated and are color-coded according to the number of events that have occurred. You can hover your mouse pointer on a legend to show details such as error type, time, number of events aggregated, threshold value configured for that event, and the breach value. You can also customize the time period of the graph by selecting the time from the time-period drop-down list.

[From Build 56.20]

[# 693769]

High Availability

While registering a node during a High Availability deployment, both the node passwords must be the default "nsroot."

[From Build 56.20]

[# 691836]

NetScaler VPX Check-In/Check-Out Licensing

NetScaler VPX Check-In/Check-Out Licensing support for new licenses

You can now purchase and use the new 10Gbps+ NetScaler VPX Check-In/Check-Out Licenses for VPX instances deployed in all the supported hypervisors and cloud deployments. The supported new licenses are 10Gbps, 15Gbps, 25Gbps, 40Gbps and 100Gbps with editions Standard, Enterprise and Platinum.

[From Build 53.8]

[# 690858, 681022]

Networks

Ability to Poll an Entity

There is now an option to select the entity (instance, virtual server, service, service group, and so on) and individually poll its status on NetScaler MAS.

For more information, see https://docs.citrix.com/en-us/netscaler-mas/12/instance-management/how-to-poll-selected-netscaler-instances.html

[From Build 56.20]

[# 599843]

Saving variable definition and details while saving a config job

The values that you specify for the variables when you create config jobs are now retained by NetScaler MAS when you save the job and exit, or when you schedule a job to be run at a later time.

[From Build 53.8]

[# 637830]

Support for NetScaler SD-WAN SE in NetScaler MAS.

You can now add the NetScaler MAS server as an AppFlow collector in the NetScaler SD-WAN SE/EE appliance or using the NetScaler SD-WAN Center. The NetScaler SD-WAN SE/EE appliance sets up a profile and registers itself as a managed device in NetScaler MAS. You can then view TCP for HDX data of these instances in NetScaler MAS.

[From Build 56.20]

[# 657222]

Support for NetScaler SD-WAN SE in NetScaler MAS.

You can now add the NetScaler MAS server as an AppFlow collector in the NetScaler SD-WAN SE/EE appliance or using the NetScaler SD-WAN Center. The NetScaler SD-WAN SE/EE appliance sets up a profile and registers itself as a managed device in NetScaler MAS. You can then view TCP for HDX data of these instances in NetScaler MAS.

[From Build 53.8]

[# 657222]

Support for Revision History Difference and Audit Template for Admin Partitions

The revision history difference and the audit template for administrator partition are now supported in NetScaler MAS.

Revision history difference for administrator partition allows you to view the difference between the five latest configuration files for a partitioned NetScaler instance. You can compare the configuration files against each other (example Configuration Revision - 1 with Configuration Revision -2) or against the current running/saved configuration with Configuration Revision. Along with the differences in configuration, the correction configurations are also shown. You can export all the corrective commands to your local folder and correct the configurations.

Audit templates for partition allow you to create a custom configuration template and associate it with a partition instance. Any variation in the running configuration of the instance with the audit template is shown in the "Template vs Running diff" column of the Audit Reports page. Along with the differences in configuration, the correction configurations are also shown. You can also export all the corrective commands to your local folder and correct the configurations.

For more information, see https://docs.citrix.com/en-us/netscaler-mas/12/instance-management/Manage_Admin_Partitions_NetScaler_Instances.html

[From Build 56.20]

[# 657300]

Built in report of all Device > Partition > VIP > Service Group/Service bindings

You can now export a report of all the load balancing entities configured on the managed NetScaler instances. The report provides a high-level mapping of all NetScaler instances, partitions, virtual servers, services and service groups. You can download the report instantly in csv format, or schedule the reports to be sent as a mail attachment daily, weekly and monthly.

For more information, see http://docs.citrix.com/en-us/netscaler-mas/12/network-functions/how-to-generate-reports-for-load-balancing-entities.html

[From Build 53.8]

[# 663174]

Audit Templates created in Configuration Audit module are now available in Configuration Jobs module

You can create audit templates in Configuration Audit module in NetScaler MAS to make sure that certain configurations exist on your NetScaler instances and to check the instances regularly for any deviation. NetScaler MAS allows you to save this template in the system so that the audit template is available in Configuration Jobs module also. Now the audit templates can be used to create configuration jobs. This allows the audit templates to be used interchangeably between configuration jobs and configuration audits.

For more information, see http://docs.citrix.com/en-us/netscaler-mas/12/configuration-management/how-to-reuse-configuration-audit-templates-in-configuration-jobs.html

[From Build 51.24]

[# 664123]

Pre-Upgrade Validation of NetScaler Instances, using NetScaler MAS

You must now perform pre-upgrade validation checks before using NetScaler MAS to upgrade the Netscaler instances. Pre-upgrade validation includes the following checks:

• Check for any existing customizations of NetScaler instances. Removing the customizations before performing the other pre-upgrade checks is recommended.

• Check the disk usage of NetScaler instances. If the disk usage is more than 80%, clean up the disk space.

• Check for disk hardware issues on NetScaler instances.

If the instances do not pass the pre-validation checks, proceeding with the upgrade process is not recommended.

For more information, see http://docs.citrix.com/en-us/netscaler-mas/12/configuration-management/how-to-upgrade-netscaler-instances-using-mas.html.

[From Build 53.8]

[# 677556]

Auto selection and Manual selection of virtual servers for licensing

You can now select the virtual servers to be managed by the NetScaler MAS. Earlier, even after you explicitly select the virtual servers to be managed, with the next polling cycle, NetScaler MAS randomly manages more virtual servers if managed virtual servers are less than the licensed limit.

You can now filter event rules by Device Family filter to track the NetScaler instance from which NetScaler MAS receives an event.

You can also add a configuration command as a filter in an event rule, and the rule can include the command's authentication status and/or its execution status.

You can also filter your events by messages. You can specify the complete message, or you can use the wildcard character (*) for parts of the message.

For more information, see https://docs.citrix.com/en-us/netscaler-mas/12/event-management/create-event-rule-mas.html.

[From Build 51.24]

[# 679110]

Syslog suppress filters

When configured as a syslog server, NetScaler MAS receives all syslog messages sent to it by the configured NetScaler instances. There might be a large number of messages that you might not want to see. For example, you might not be interested in seeing all informational level messages. You can now discard some of the syslog messages that you are not interested in. You can suppress some of the syslog messages coming into NetScaler MAS by setting up some filters. NetScaler MAS drops all messages that matches with the criteria. These dropped messages do not appear on the NetScaler MAS GUI and these messages are also not stored in the customer's NetScaler MAS database.

For more information, see http://docs.citrix.com/en-us/netscaler-mas/12/event-management/how-to-suppress-syslog-messages.html

[From Build 53.8]

[# 679274]

Exporting of Configuration Audit Diff Report

NetScaler MAS allows you to download the configuration audit diff report in configuration audit section. The configuration audit section enables you to export the summary report across all instances and per instance and also allows you to export granular diff report for each instance-template pair.

For more information, see https://docs.citrix.com/en-us/netscaler-mas/12/configuration-audit/audit-reports.html

[From Build 56.20]

[# 679736, 669618]

Option to save or not save the configuration changes while enabling or disabling the entities.

You can now choose to save the configuration changes in NetScaler instances when you are enabling and disabling the Virtual servers, services, service groups, and application servers from NetScaler MAS. In NetScaler MAS, navigate to Networks > Network functions > Load Balancing. Select the required entities and choose Save Configuration when prompted for when you enable or disable the instances.

[From Build 51.24]

[# 680815]

Last State change for entities in NetScaler MAS

You can view the state changes along with the duration of the change for virtual servers, services, service groups, and servers under the Networks > Network functions in NetScaler MAS. To view the state change, navigate to Networks > Network Functions, and you can see the details under the Last State Change coloumn of the selected entity.

[From Build 51.24]

[# 680896, 678122]

Licensing the non-addressable virtual servers

When system licensing in NetScaler MAS is set to automatically select virtual servers, the licensing feature no longer licenses non-addressable virtual servers. However, you can manually license these virtual servers as follows:

NetScaler MAS allows all the audit templates under Networks > Configuration Audit > Audit Templates to be run at a time that is scheduled individually or globally as per your requirement. You can schedule the config audit template to be run at a specific time rather than running the template at a default time configured by the system. When you select Customize template schedule option, you can schedule the template to be run daily, on a specific day in the week, or on a specific day in the month. For each option, you must also enter the schedule time when NetScaler MAS should run the template. NetScaler MAS provides you with the following options to schedule exporting of the config audit diff report.

Use global polling interval. Select this option to run the template on the instances at a time configured globally on NetScaler MAS.

Customize template schedule. Use this option to configure the time and the frequency at which the templates need to be run.

Send report through email. Use this option to configure the mail profile to which the diff report should be sent as a mail attachment.

For more information, see https://docs.citrix.com/en-us/netscaler-mas/12/configuration-audit/audit-reports.html

When a configuration change happens in a NetScaler instance in the network, the instance updates the configuration. The instance then sends a ConfigChange SNMP trap to NetScaler MAS. You can enable NetScaler MAS to run configuration audit on that instance. You can configure NetScaler MAS to generate a configuration audit diff, whenever it receives a ConfigChange SNMP trap.

For more information, see https://docs.citrix.com/en-us/netscaler-mas/12/configuration-audit/generate-configuration-audit-diff-for-configchange-snmp-traps.html

[From Build 56.20]

[# 682007]

Ability to Reorder Commands in Configuration Job Editor

You can now rearrange and reorder the commands in the configuration job editor. You can now move the commands from one line to another by dragging the command line. You can also move or rearrange the command line from one line to any target line by simply changing the command line number.

[From Build 56.20]

[# 684164, 637303, 684320]

Ability to Preview and Modify the Variables in Configuration Job

In NetScaler MAS, you can now preview all the variables that you have defined while creating or editing a configuration job in a single consolidated view.

Click Preview Variables tab in Configuration Job Editor to preview the variables in a single consolidated view. A new pop-up window appears and displays all the parameters of variables such as Name, Display Name, Type, and default value in a tabular format. You can also edit and modify these parameters. Click Done after you have edited or modified any of the parameters.

You can do one of the following to preview all the variables in a single consolidated view:

- Creating a configuration job. Navigate to Networks > Configuration Jobs, select Create Job. On the Create Job page, you can preview all the variables.

- Editing a configuration job. Navigate to Network > Configuration Jobs, select the job name and click Edit. On the Configure Job page, you can preview all the variables that were added while creating the configuration job.

For more information, see https://docs.citrix.com/en-us/netscaler-mas/12/configuration-management/how-to-use-variable-in-configuration-jobs.html

[From Build 56.20]

[# 684166]

Using NetScaler MAS to Remove Image Files used for Upgrading NetScaler MAS and NetScaler Instances

When you upgrade NetScaler MAS, the NetScaler MAS image files are copied to the corresponding /var/mps/mps_images folder. To prevent image files from occupying storage space after you upgrade NetScaler MAS, you can select an option to have the images deleted automatically. NetScaler MAS then deletes these images from the /var/mps/mps_images after the upgrade is successful. In addition, images copied to a NetScaler instance's /var/nsinstall directory in NetScaler MAS when the instance is upgraded are removed after the upgrade is successful.

To select this option in NetScaler MAS:

1. Navigate to System > System Administration, and click Upgrade NetScaler MAS.

For more information, see http://docs.citrix.com/en-us/netscaler-mas/12/upgrade.html.

[From Build 53.8]

[# 684236]

Ability to Add Multiple Templates of Different Types in Configuration Jobs

You can now add multiple templates of different types in the configuration job editor while creating a configuration job. To add multiple templates, navigate to the Networks > Configuration Jobs and click Create Job. On the Create Job page, enter the job name, and select the instance type. From the Configuration Source drop-down list, you can select the required source and then drag multiple templates that you require to the configuration editor. The template source types are Configuration Template, Inbuilt Template, Master Configuration, Record and Play, Instance, and File.

[From Build 56.20]

[# 686881]

Support for customized SSH port for NetScaler instances in NetScaler MAS

You can now customize the SSH port used for communication between the NetScaler MAS and NetScaler instances.

To set the SSH port for the Device Profiles

1. Log on to NetScaler MAS using a supported web browser.

2. Navigate to Networks, and select the device type of the NetScaler Instance you want to discover in NetScaler MAS.

3. Click Profiles.

4. In the Admin Profiles page, click Add.

5. In the SSH Port field, enter the configured custom SSH port number for NetScaler Instances to communicate with NetScaler MAS.

a. Common Variable Values for all Instances. Select this option to input common values to the variables that are listed on this page for the selected instance.

b. Upload input file for variables values. Select this option to download the file, enter values for the variables, and then upload the file to NetScaler MAS.

For more information, see https://docs.citrix.com/en-us/netscaler-mas/12/configuration-audit/nmas-audit-configuration-instance.html

[From Build 56.20]

[# 691127]

Ability to Persist the Input Variable Values in Configuration Jobs

In NetScaler MAS, while creating the configuration jobs, the specified input variable values including input files are now persisted. You can view and edit these values and also the input files that you have uploaded earlier while creating the configuration job. To view the input variable values, navigate to Network > Configuration Jobs, select the job and click Edit. On the Specify Variable Values tab, you can view the persisted variable values. The input file that you uploaded earlier also persists. You can download the input file, edit the file and then upload the same input file without changing the name.

For more information, see https://docs.citrix.com/en-us/netscaler-mas/12/configuration-management/how-to-use-variable-in-configuration-jobs.html

[From Build 56.20]

[# 691584]

Ability to Import and Export the Configuration Templates

You can export the configuration templates and import the template to the same or another tenant in the NetScaler MAS. The exported template data (like configuration commands, variable definitions, and parameters) are not lost after importing.

To export the configuration template, navigate to Networks > Configuration Jobs > Configuration Templates. Select the configuration template and click Export. The exported configuration templates are saved in the local system in a .json file format. You can then import this file to same or another tenant in NetScaler MAS to create a configuration template. To import the configuration template, click Import and select the .json file that you have saved locally.

For more information, see https://docs.citrix.com/en-us/netscaler-mas/12/configuration-management/how-to-import-and-export-configuration-templates.html

NetScaler MAS now supports expiry warning for NetScaler Pooled and NetScaler VPX Check-In/Check-Out licenses. You can now configure license expiry threshold for these licenses. By setting thresholds, NetScaler MAS sends notifications through email or SMS when a license is due to expire. A notification is also sent when the license has expired. An event is generated when a license expiry notification is sent.

For more information on pooled license expiry, see https://docs.citrix.com/en-us/netscaler-mas/12/netscaler-pooled-capacity/configure-expiry-checks.html

For more information on check-in/check-out license expiry, see https://docs.citrix.com/en-us/netscaler-mas/12/NetScaler-CICO0.html#license-expiry

[From Build 56.20]

[# 692014]

Wildcard Support for Dynamically Adding Applications to Groups in NetScaler MAS

When you add applications to a group in NetScaler MAS, you can use regex to search and add the applications that meet the regex criteria to the groups. The users who are bound to these groups can access only those specific applications. The regex expression specified is persisted in NetScaler MAS. When a new application is added to the system, NetScaler MAS applies the search criteria to the new application, and the application that meets the criteria dynamically becomes part of the group. You do not have to manually add the new application to the group. The applications are updated dynamically in the system, and the respective group users can see the applications under appropriate modules in NetScaler MAS.

For more information, see https://docs.citrix.com/en-us/netscaler-mas/12/authentication-and-rbac/role-based-access-control/rbac-configuring-groups.html

In NetScaler MAS, the application analytics and management feature is extended to support HAProxy applications. The Application dashboard provides a complete view of all the applications monitored by NetScaler MAS, that is, both NetScaler and HAProxy applications. HAProxy discrete applications are created automatically for every managed HAProxy frontend. You can also group these applications to form custom applications similar to NetScaler applications.

Note: App Activity investigator is not available for HAProxy applications.

For more information, see https://docs.citrix.com/en-us/netscaler-mas/12/application-analytics-and-management.html.

The VMware NSX Manager GUI now supports StyleBooks. With this enhancement, you can create the complete load balancing configuration from this GUI. NetScaler MAS uses built-in stylebooks to deploy the load balancing configuration. Previously, you had to deploy StyleBooks in NetScaler MAS in order to deploy load balancing configurations or applications on NetScaler.

Do the following to enable configuration of load balancing from the VMware NSX Manager GUI:

1. Open the /mps/stylebooks/scripts/shipped_stylebooks_list.sh file in NetScaler MAS.

2. Edit the file.

3. Add the following two StyleBooks to the end of the StyleBooks list in shipped_stylebooks_list.sh.

For more information, see https://docs.citrix.com/en-us/netscaler-mas/12/sdn-orchestration/netscaler-automation-in-cisco-aci-cloud-orchestrator-mode.html.

[From Build 56.20]

[# 696527]

StyleBooks

Prompt users for instance credentials when creating configpacks

A new option has been added to NetScaler MAS that when enabled, requires you to provide your credentials that you use to login to the NetScaler instances during the creation or update of a configpack. If this option is not enabled, NetScaler MAS would always use the user credentials stored in the device profile when connecting to the NetScaler for creating or updating a configpack.

[From Build 51.24]

[# 681706]

Viewing Private StyleBooks in NetScaler MAS GUI

As the number of StyleBooks - both public and private increases, you need an ability to search for a particular StyleBook that you want to access. You also need an ability to view both types of StyleBooks separately. In NetScaler MAS GUI when you navigate to Applications > StyleBooks, you can view a list of StyleBooks that are present in the system. Both types of StyleBooks have distinct icons that declare them as either private or public.

For more information, see https://docs.citrix.com/en-us/netscaler-mas/12/stylebooks/how-to-view-stylebooks.html

[From Build 56.20]

[# 686913]

Enabling Single Sign-On for Google Apps in NetScaler instances using StyleBook

The default SSO Google Apps StyleBook in NetScaler MAS allows you to enable Single Sign-On for Google applications in NetScaler instances. The StyleBook configures the NetScaler instance as a SAML identity provider for authenticating users to access Google Apps.

For more information, see https://docs.citrix.com/en-us/netscaler-mas/12/stylebooks/how-to-use-sso-google-apps-stylebook.html

[From Build 56.20]

[# 697027]

Ability to visualize dependencies of a StyleBook as a graph

You can now visualize all the dependencies of a StyleBook, that is, any other StyleBooks that your selected StyleBook depends on. Dependencies are created as a result of composing new StyleBooks by using existing ones. Dependencies are visualized as a graph of boxes and arrows, where each box represents a StyleBook and each arrow represents a direction dependency from a StyleBook to its dependent one. Navigate to Applications > Configurations > StyleBooks and in the list of StyleBooks that are displayed on the right-side panel, click the View Dependencies link for the StyleBook that you want to visualize.

For more information, see https://docs.citrix.com/en-us/netscaler-mas/12/stylebooks/how-to-view-stylebooks.html

[From Build 56.20]

[# 697175]

System

Instance Backup Settings

You can now configure NetScaler MAS to create automatic backup files of NetScaler instances in the network at a specific time (hour and minute). This is in addition to the backups created at a specified interval. Additional updates to instance backup settings are the following:

. You now have the option to disable the creation of device backups by NetScaler MAS. #683315

. Because of the large size of Geo database files, you now have the option to selectively include or exclude them in the backup files. # 683833

. You can now transfer the NetScaler instance backup files to an external location by specifying the IP address of the external storage device. # 680907

. NetScaler MAS can now reexecute the task of backing up an instance once every 30 seconds. # 680795

. NetScaler MAS can now send an SNMP trap or a Syslog notification when it is unable to create a backup file for the selected NetScaler instance. # 683832

A high availability deployment (HA) of NetScaler MAS servers now deploys two servers in an active-passive HA mode. One NetScaler MAS server is deployed as the active node and the other as the passive node. Both servers have the same configuration. If, for any reason, the active node goes down, the passive node takes over (a process called failover). This deployment type is ideal for disaster recovery.

If you are upgrading your NetScaler MAS HA setup from a previous build to this build, make a note of the following before you begin upgrading your setup:

* As part of the upgrade process, all configurations are updated such that all NetScaler instances are now managed by the active node. This is applicable to all configurations such as SNMP, Syslog, Analytics, and so on.

* After you upgrade the NetScaler MAS to active-passive mode, some NetScaler instances will still continue to send traffic to the passive node for approximately 5 minutes. As a result, the incoming traffic will be lost for that duration.

* If you had configured a load balancing virtual server for unified management access of your NetScaler MAS servers, after you upgrade the NetScaler MAS HA pair to active-passive mode you have to run the following command on the NetScaler appliance to update the load balancing configuration:

You can configure a route in NetScaler MAS to establish a connection between NetScaler MAS and the NetScaler VPX instances deployed in the cloud.

[From Build 53.8]

[# 689126]

Configuring Network Reporting Prune Settings for NetScaler MAS

You can now configure the prune interval of network reporting data in NetScaler MAS. This limits the amount of network reporting data being stored in the NetScaler MAS server’s database. By default, pruning happens every 24 hours (at 01.00 hours) for the network reporting historical data.

For more information, see https://docs.citrix.com/en-us/netscaler-mas/12/network-reporting.html

[From Build 56.20]

[# 692461]

Fixed Issues in Previous NetScaler MAS 12.0 Releases

The issues that were addressed in NetScaler MAS 12.0 releases prior to Build 57.24. The build number provided below the issue description indicates the build in which this issue was addressed.

Analytics

The Video Insight metrics might be incorrect if they represent both encrypted and unencrypted video traffic.

[From Build 51.24]

[# 683205]

In geo maps, the color coding for certain small cities is white when it should be green.

[From Build 53.8]

[# 683686, 678289]

The Microsoft Edge browser entry is displayed in the "Others" category in Gateway Insight, instead of under the "Device Browser Type" category.

[From Build 56.20]

[# 689130]

You cannot see analytics data in the day, week, or month report on Insight Center.

[From Build 56.20]

[# 692999]

You cannot see analytics data in the day, week, or month report on Insight Center.

[From Build 56.20]

[# 693359]

High Availability

When NetScaler instances in HA setup fails over and if the new primary is inaccessible from NetScaler MAS, the instance is no longer seen in NetScaler MAS GUI.

[From Build 56.20]

[# 697017]

NetScaler Pooled Capacity

While using NetScaler Pooled Capacity in NetScaler MAS, if you allocate bandwidth to any NetScaler instance, in NetScaler MAS GUI it is displayed as "Not Allocated" but on the NetScaler instance it displayed as "Allocated."

[From Build 53.8]

[# 690166, 688591, 692706, 671811]

Networks

In NetScaler MAS, you cannot export reports for some tabular views and dashboards. With this fix, you can now export the content of the tables and dashboards.

[From Build 56.20]

[# 670226]

In NetScaler MAS GUI, the hostname of the NetScaler instance does not appear on the details page of SSL Certificate. With this fix, the hostname is visible.

1. In NetScaler MAS, navigate to Networks > SSL Dashboard.

2. On the SSL Dashboard page, click inside one of the circles.

3. Select a certificate on the SSL Certificates page, and click Details.

[From Build 56.20]

[# 670374]

When a NetScaler SDX is added from SVM, you need to select the required NetScaler VPX profile from the drop-down list and provide the NetScaler VPX instance password.

1. If the password for the NetScaler VPX profile is provided incorrectly, the NetScaler VPX instance state is displayed as "Out of Service."

2. If the password for the NetScaler VPX profile is provided correctly, the NetScaler VPX instance state is displayed as "Up."

[From Build 51.24]

[# 678291]

The NetScaler VPX inventory node is disabled if the navigation node was already selected.

[From Build 56.20]

[# 684922]

In Network Reporting, the drop-down list disappears when you move the mouse pointer slightly away from it.

[From Build 53.8]

[# 684924]

When you create a group using the NetScaler MAS Group UI wizard, the success message that describes that the group is created is displayed before the wizard is finished.

[From Build 53.8]

[# 684944]

While creating a new configuration job, selecting the "Save as Configuration" does not give any error.

[From Build 53.8]

[# 686385]

The first node in a NetScaler MAS high availability setup becomes the secondary node after it is deployed from the GUI and then, restarted.

[From Build 56.20]

[# 686625]

In GeoMap datacenter, even if the total number of events is shown as 0, if we click on it, correct values are displayed.

[From Build 51.24]

[# 686638]

In NetScaler MAS, some parameters are missing when you navigate to Networks > Events and click any of the events to view the details.

[From Build 56.20]

[# 686791, 695523]

In NetScaler MAS, when you are running a configuration job using a Master Config template created by using C# API, jobs in pending state show Zero percent as progress and it is not possible to abort them.

This issue was seen in customer environment when category was not set for Master Config templates created by using C# API, as setCategory method is not available in the API. As set category issue is fixed as part of #687591, this issue cannot be reproduced.

[From Build 53.8]

[# 686878]

In NetScaler MAS, when you are creating a configuration job, the list of templates is not updated when the type of the configuration source is changed.

[From Build 53.8]

[# 686880]

In NetScaler MAS when you save a configuration job and edit it later, the variable types that you have declared are not saved.

[From Build 53.8]

[# 686882]

When you create a new configuration job, NetScaler MAS verifies the existence of a job with the same name. If there is a job with the same name, NetScaler MAS displays an error saying that a configuration job already exists with the same name for the same tenant when you click "Next" on the "Select Configuration" screen.

[From Build 53.8]

[# 686883]

When you choose File as a configuration source to create a job, you must click the Upload button to upload files.

[From Build 56.20]

[# 686889]

When you generate PDF reports of Config Jobs that were run on NetScaler MAS, the order of execution of commands in the generated reports might be incorrect, although the order of execution on the NetScaler instances was correct, in accordance with the configuration template definition.

[From Build 51.24]

[# 686963]

No results are displayed when you search for an instance under Load Balancing virtual servers in the System Licenses page. You can navigate to this page by going to Networks > Licenses > System Licenses. Under the Managed Virtual Servers section, select Load Balancing, and use the search functionality to search for an instance.

[From Build 56.20]

[# 687182]

In NetScaler MAS, the Hamburger icon (menu icon on the right corner) changes to Close icon (X) when clicked to open the Navigation Menu. With this fix, if we open any configuration page for example, Add Instance, Configure Insight and others, the navigation menu panel is hidden, and the "X" icon is disabled.

[From Build 53.8]

[# 687203]

In NetScaler MAS, if you try to delete the default certificates of any discovered NetScaler instances, an error message is displayed. Now once you select the default certificates, "Delete" button is disabled.

[From Build 53.8]

[# 687610]

Roll back commands are not displayed on the Job Preview tab of the Create Job page. With this fix, you can view the associated rollback commands of the configuration job on the Networks > Configuration jobs > Preview page.

[From Build 56.20]

[# 687621]

An unexpected single space is added in the command after you replace the variable with a user-defined value.

For example, in the following command, the variable $env$ is replaced with the value of "qa" and an unexpected space is appended by NetScaler MAS, which results in failure of the command.

Command:

chmod 555 /var/custom/config-* && /var/custom/config-$env$.sh

Replaced Command:

chmod 555 /var/custom/config-* && /var/custom/config-qa .sh

[From Build 53.8]

[# 688154]

There is a parsing limitation for the following format:

frontend http

bind :<port_number>

[From Build 56.20]

[# 688171]

The HAProxy instances deployed on Linux host not supported by NetScaler MAS displays the uptime as nan (not a number).

The NetScaler MAS Python SDK is not compatible with Python version 3.x.

[From Build 56.20]

[# 692108]

If entity polling by NetScaler MAS discovers a very high number of NetScaler instances, the NetScaler MAS GUI might become unresponsive.

[From Build 53.8]

[# 692617]

In NetScaler MAS, in form input text box when you enter special characters such as "&" in the input fields such as name and description, "&amp" replaces "&".

[From Build 56.20]

[# 692656, 696898]

In Networks > Network Functions > Load Balancing > Virtual Servers, for some load balancing virtual servers that are in the UP state for more than 248 days, the column "UP Since" displays incorrect values.

[From Build 56.20]

[# 693146]

Due to the NetScaler MAS cleanup utility prompt, the cleanup tool stops NetScaler MAS processes and does not show tables.

[From Build 56.20]

[# 693186]

NetScaler MAS MIB files are not updated for traps.

[From Build 56.20]

[# 693922]

In NetScaler MAS, a user in one of the user groups was unable to view the list of NetScaler VPX instances under Networks > Instance > NetScaler VPX.

The GUI expects the column headings from the server (Instance IP address, hostname, build number, CPU usage, and other information) as follows:

But instead it receives alphanumeric characters (hexadecimal format) as follows that causes the exception:

Property: "0\u0001ì\u0006\b”

[From Build 56.20]

[# 694800]

Email notifications are not sent for SSL certificates expiry after "masd restart."

[From Build 56.20]

[# 695133]

NetScaler MAS is unable to send syslog data to an external syslog server.

[From Build 56.20]

[# 695354]

The Create Job button in the Configuration Jobs page is disabled when any row on the Jobs page has a blue background.

[From Build 56.20]

[# 695397]

The entity name is truncated and displayed for SNMP alerts on NetScaler MAS.

[From Build 56.20]

[# 696639]

In NetScaler MAS (navigate to Networks > Events > Event Messages), when you try to sort the event messages based on date, the sorting does not happen correctly. The messages are sorted in the reverse order to the direction of the sorting arrows. For example, when the messages are sorted from newer to older, the arrow points upwards.

[From Build 56.20]

[# 696737]

In an event rule, when you execute a script that has a message that has space (" "), the script is not activated.

[From Build 56.20]

[# 696896]

When the primary node where licenses are applied in a high availability setup goes down, fresh licenses had to be applied again within 30 days. If licenses were not applied again, the existing licenses data are deleted and reset to default on NetScaler MAS.

[From Build 56.20]

[# 697015]

Event rule actions are not saved when an event rule is reopened and edited.

[From Build 56.20]

[# 697574]

Only the first chart of the two Network Report charts displayed in the same screen were exported in PDF, PNG, or JPEG formats.

[From Build 56.20]

[# 699380]

Orchestration

You can now view load balancer statistics from OpenStack by using a Neutron CLI command: neutron lbaas-loadbalancer-stat. This command fetches cumulative statistics of all listeners corresponding to the OpenStack load balancer from NetScaler MAS and displays them on the OpenStack console. Make sure that you have installed the latest driver, which is part of the current NetScaler MAS build.

[From Build 53.8]

[# 692245]

This is an exceptional case where a child entity associated with load balancer continues to be in PENDING_CREATE or PENDING_UPDATE or PENDING_DELETE status while the root load balancer is in ACTIVE state. This happens when the OpenStack Neutron database is accessed excessively by the threads trying to create load balancer entities or trying to update status of the load balancer entities.

[From Build 56.20]

[# 694165]

OpenStack supports 255 chars as maximum length of name and description for LB entities. But NetScaler MAS orchestration APIs restrict the maximum length to 40 chars. Because of this, OpenStack neutron lbaas commands to create or update LB entities with name or description length greater than 40 chars fails. With this fix, NetScaler MAS orchestration APIs are modified to support 255 chars as maximum length of name and description of LB entities.

[From Build 56.20]

[# 695351]

Settings

In NetScaler MAS, while using Nitro SDKs, setters for "Category" property is not available in Configuration Templates resource.

[From Build 53.8]

[# 687591]

StyleBooks

The asterisk "*" is accepted as valid input for tcp-port parameter in the next release.

[From Build 56.20]

[# 694155]

System

A high availability deployment (HA) of NetScaler MAS servers now deploys two servers in an active-passive HA mode. One NetScaler MAS server is deployed as the active node and the other as the passive node. Both servers have the same configuration. If, for any reason, the active node goes down, the passive node takes over (a process called failover). This deployment type is ideal for disaster recovery.

If you are upgrading your NetScaler MAS HA setup from a previous build to this build, make a note of the following before you begin upgrading your setup:

* As part of the upgrade process, all configurations are updated such that all NetScaler instances are now managed by the active node. This is applicable to all configurations such as SNMP, Syslog, Analytics, and so on.

* After you upgrade the NetScaler MAS to active-passive mode, some NetScaler instances will still continue to send traffic to the passive node for approximately 5 minutes. As a result, the incoming traffic will be lost for that duration.

* If you had configured a load balancing virtual server for unified management access of your NetScaler MAS servers, after you upgrade the NetScaler MAS HA pair to active-passive mode you have to run the following command on the NetScaler appliance to update the load balancing configuration:

add lb monitor MAS_Monitor TCP-ECV -send "GET /mas_health HTTP/1.1

Accept-Encoding: identity

User-Agent:NetScaler-Monitor

Connection: close

"" -recv "{"statuscode":0,"is_passive":0}" -LRTM DISABLED

[From Build 51.24]

[# 681126, 681117, 682818]

In NetScaler MAS, while creating the system groups, the session timeout value is displayed as -1 which is an invalid value (System > User Administration > Groups > Create System Groups).

[From Build 51.24]

[# 684947]

The user is not able to log on to NetScaler Gateway as there is a high-utilization of memory.

[From Build 56.20]

[# 687462, 686135, 692657, 699960, 698852]

The event system may restart upon upgrade of NetScaler MAS due to a corrupted connection.

[From Build 56.20]

[# 688078]

After you navigate to System > Deployment and click the Download XVA button, the Download XVA button points to the wrong URL link.

[From Build 53.8]

[# 691137]

In NetScaler MAS, if you create a group name that has spaces, certain features that use group names for permissions may not work as expected. For example, retrieving apps.

[From Build 56.20]

[# 692629, 693000]

Upgrading NetScaler instances in HA mode from NetScaler MAS fails because the secondary node takes some time to restart causing the forced failover from primary to fail.

[From Build 56.20]

[# 693119]

The "star" sign is no longer displayed against the active node in a high availability setup on NetScaler MAS. You can see this by navigating to System > Deployment.

[From Build 56.20]

[# 693647]

Email alerts sent by NetScaler MAS for an event might contain invalid data that does not belong to that particular event. This might happen because of uncleared cache.

[From Build 56.20]

[# 694376, 697590]

When scheduling instance backup settings, there is a difference of few hours between the scheduled time of backup and the time displayed on the NetScaler MAS GUI.

[From Build 56.20]

[# 695489]

Release history

For details of a specific release, see the corresponding release notes.